From c5a17e44dd5719ee2db61353c92cf396fa74cd34 Mon Sep 17 00:00:00 2001 From: ajianaz Date: Thu, 3 Sep 2026 15:46:32 +0700 Subject: [PATCH] ci(release): make main sync best-effort so tags publish unblocked MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The main-protected ruleset added in #313 (pull_request + required_status_checks, no bypass actors) rejects the sync job's direct force-push to main, which gated every downstream job — no binaries, no ghcr image, no GitHub release. Mark the job continue-on-error so releases ship; main sync stays documented as an admin follow-up. --- .github/workflows/release.yml | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index d635cdf..addaabf 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -15,6 +15,11 @@ jobs: name: Sync main branch runs-on: ubuntu-latest if: startsWith(github.ref, 'refs/tags/v') + # Best effort only: the main-protected ruleset (pull_request + + # required_status_checks) rejects direct pushes, so this fails until an + # admin allows the automation in Settings -> Rules -> Rulesets. It must + # never block binaries, the ghcr image, or the GitHub release. + continue-on-error: true permissions: contents: write steps: